CVE-2025-10038CWE-266

CVE-2025-10038

Medium · published October 15, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

The Binary MLM Plan plugin for WordPress is vulnerable to limited Privilege Escalation in all versions up to, and including, 3.0. This is due to bmp_user role granting all users with the manage_bmp capability by default upon registration through the plugin's form. This makes it possible for unauthenticated attackers to register and manage the plugin's settings.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.2th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2025-10-15T13:15Z
References (4)
https://plugins.trac.wordpress.org/changeset/3380455/binary-mlm-plan/tags/5.0/includes/admin/class-bmp-admin-menus.php?old=3259986&old_path=binary-mlm-plan%2Ftags%2F3.0%2Fincludes%2Fadmin%2Fclass-bmp-admin-menus.php · [email protected]https://plugins.trac.wordpress.org/changeset/3380455/binary-mlm-plan/tags/5.0/includes/bmp-hook-functions.php?old=3259986&old_path=binary-mlm-plan%2Ftags%2F3.0%2Fincludes%2Fbmp-hook-functions.php · [email protected]https://wordpress.org/plugins/binary-mlm-plan/ · [email protected]https://www.wordfence.com/threat-intel/vulnerabilities/id/7951c8e4-b610-4cc4-ab27-4cfa78d72302?source=cve · [email protected]
EPSS history
Timeline
  • 15 OCT 08:25Z
    Binary MLM Plan <= 3.0 - Unauthenticated Limited Privilege Escalation
    cvelistv5